I0811 07:31:14.183005 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0811 07:31:14.183158 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0811 07:31:14.186918 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0811 07:31:14.186946 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0811 07:31:14.186956 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0811 07:31:14.187435 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0811 07:31:14.187486 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0811 07:31:14.187798 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0811 07:31:14.192986 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0811 07:31:14.210558 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0811 07:31:14.210778 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0811 07:31:14.210819 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0811 07:31:14.215320 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0811 07:31:14.218580 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0811 07:31:14.224471 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0811 07:31:14.227248 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0811 07:31:14.229769 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0811 07:31:14.232153 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0811 07:31:14.232179 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0811 07:31:14.232190 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0811 07:31:14.232250 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0811 07:31:14.234111 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0811 07:31:14.236017 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0811 07:31:14.243278 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0811 07:31:14.245872 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0811 07:31:14.248483 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0811 07:31:14.251278 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0811 07:31:14.253393 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0811 07:31:14.254989 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0811 07:31:14.255025 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0811 07:31:14.258543 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0811 07:31:14.266226 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0811 07:31:14.269711 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0811 07:31:14.273229 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0811 07:31:14.280627 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0811 07:31:14.281173 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0811 07:31:14.281343 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0811 07:31:14.281589 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0811 07:31:14.281654 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0811 07:31:14.281908 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0811 07:31:14.293174 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0811 07:31:14.316301 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0811 07:31:14.336639 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0811 07:31:14.359107 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0811 07:31:14.374276 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0811 07:31:28.997696 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-08-11 07:31:28.997673879 +0000 UTC m=+14.842021529 I0811 07:31:29.682588 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-08-11 07:31:29.682576062 +0000 UTC m=+15.526923712 I0811 07:31:29.682834 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0811 07:31:29.682880 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-11 07:31:29.682861443 +0000 UTC m=+15.527209073 E0811 07:31:29.694373 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0811 07:31:29.694524 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-08-11 07:31:29.694448662 +0000 UTC m=+15.538796312 E0811 07:31:29.694554 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0811 07:31:29.694790 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0811 07:31:29.695603 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-08-11 07:31:29.695596838 +0000 UTC m=+15.539944488 E0811 07:31:29.705731 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0811 07:31:29.706428 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0811 07:31:29.706459 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0811 07:31:29.706490 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0811 07:31:29.712796 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0811 07:31:29.740398 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-08-11 07:31:29.740385124 +0000 UTC m=+15.584732794 I0811 07:31:29.763946 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-08-11 07:31:29.763936837 +0000 UTC m=+15.608284477 I0811 07:31:29.789883 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 07:31:29.789871555 +0000 UTC m=+15.634219205 I0811 07:31:29.802300 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0811 07:31:29.802993 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 07:31:29.802982645 +0000 UTC m=+15.647330285 I0811 07:31:29.819942 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0811 07:31:34.707039 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 07:31:34.707023988 +0000 UTC m=+20.551371668 I0811 07:31:55.760295 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0811 07:31:55.761151 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-08-11 07:31:55.761141012 +0000 UTC m=+41.605488692 I0811 07:31:55.761359 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-08-11 07:31:55.760385298 +0000 UTC m=+41.604732979 I0811 07:31:55.772629 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-08-11 07:31:55.772618444 +0000 UTC m=+41.616966084 I0811 07:31:55.777002 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0811 07:31:55.777081 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-08-11 07:31:55.777073074 +0000 UTC m=+41.621420714 I0811 07:31:55.955417 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0811 07:31:56.001679 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-08-11 07:31:56.001664339 +0000 UTC m=+41.846012029 I0811 07:31:56.026573 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-08-11 07:31:56.026566558 +0000 UTC m=+41.870914208 I0811 07:31:56.051071 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 07:31:56.051057704 +0000 UTC m=+41.895405344 I0811 07:31:56.067145 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0811 07:31:56.067816 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 07:31:56.067808227 +0000 UTC m=+41.912155867 I0811 07:31:56.082921 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0811 07:31:56.094410 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0811 07:36:11.347717 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-121.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0811 07:36:11.347745 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-121.nip.io-tls" condition "Ready" to 2026-08-11 07:36:11.347714565 +0000 UTC m=+297.192062215 I0811 07:36:11.347816 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-121.nip.io-tls" condition "Issuing" to 2026-08-11 07:36:11.347806939 +0000 UTC m=+297.192154599 I0811 07:36:11.358468 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-121.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-121.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 07:36:11.358536 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-121.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0811 07:36:11.358558 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-121.nip.io-tls" condition "Issuing" to 2026-08-11 07:36:11.358551368 +0000 UTC m=+297.202899018 I0811 07:36:11.809955 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-121.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-121.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 07:36:11.824325 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-121.nip.io-tls-1" condition "Approved" to 2026-08-11 07:36:11.824311571 +0000 UTC m=+297.668659201 I0811 07:36:11.839100 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-121.nip.io-tls-1" condition "Ready" to 2026-08-11 07:36:11.83908268 +0000 UTC m=+297.683430350 I0811 07:36:11.862508 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-121.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 07:36:11.862492169 +0000 UTC m=+297.706839819 I0811 07:36:11.879194 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-121.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-121.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 07:36:11.882622 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-121.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 07:36:11.882609906 +0000 UTC m=+297.726957586 I0811 07:36:11.883474 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-121.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-121.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 07:36:11.894311 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-121.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-121.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 07:37:14.614662 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-11 07:37:14.614616321 +0000 UTC m=+360.458963971 I0811 07:37:14.615849 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0811 07:37:14.615967 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-08-11 07:37:14.615953102 +0000 UTC m=+360.460300742 E0811 07:37:14.626698 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0811 07:37:14.626758 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-08-11 07:37:14.626752655 +0000 UTC m=+360.471100305 E0811 07:37:14.626810 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0811 07:37:14.626726 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0811 07:37:14.627137 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0811 07:37:14.627183 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-08-11 07:37:14.627171518 +0000 UTC m=+360.471519188 E0811 07:37:14.633410 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0811 07:37:14.633865 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0811 07:37:14.633912 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0811 07:37:14.633941 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0811 07:37:14.663378 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-08-11 07:37:14.66336467 +0000 UTC m=+360.507712320 I0811 07:37:14.679370 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-08-11 07:37:14.679362338 +0000 UTC m=+360.523709978 I0811 07:37:14.702059 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 07:37:14.702041177 +0000 UTC m=+360.546388847 I0811 07:37:14.716524 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0811 07:37:19.633867 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 07:37:19.633852646 +0000 UTC m=+365.478200316 I0811 07:38:00.816937 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0811 07:38:00.816987 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-08-11 07:38:00.816962645 +0000 UTC m=+406.661310285 I0811 07:38:00.819120 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-08-11 07:38:00.819100492 +0000 UTC m=+406.663448132 I0811 07:38:00.820012 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0811 07:38:00.820034 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-08-11 07:38:00.820031016 +0000 UTC m=+406.664378656 I0811 07:38:00.821300 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-08-11 07:38:00.821274069 +0000 UTC m=+406.665621719 I0811 07:38:00.847396 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 07:38:00.847553 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 07:38:00.847876 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-08-11 07:38:00.847863233 +0000 UTC m=+406.692210883 I0811 07:38:00.848795 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0811 07:38:00.848864 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-08-11 07:38:00.848853879 +0000 UTC m=+406.693201529 I0811 07:38:00.849269 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0811 07:38:00.851098 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-08-11 07:38:00.851087379 +0000 UTC m=+406.695435029 I0811 07:38:00.852091 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-08-11 07:38:00.852082576 +0000 UTC m=+406.696430236 I0811 07:38:00.862271 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 07:38:00.862766 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0811 07:38:00.862825 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-08-11 07:38:00.862815879 +0000 UTC m=+406.707163509 I0811 07:38:01.043173 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-08-11 07:38:01.043160694 +0000 UTC m=+406.887508334 I0811 07:38:01.053356 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 07:38:01.063494 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-08-11 07:38:01.06348505 +0000 UTC m=+406.907832690 I0811 07:38:01.081710 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-08-11 07:38:01.081690101 +0000 UTC m=+406.926037781 I0811 07:38:01.089383 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-08-11 07:38:01.089365884 +0000 UTC m=+406.933713524 I0811 07:38:01.097511 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 07:38:01.097500979 +0000 UTC m=+406.941848629 I0811 07:38:01.102053 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-08-11 07:38:01.10204234 +0000 UTC m=+406.946389980 I0811 07:38:01.108296 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-08-11 07:38:01.108286065 +0000 UTC m=+406.952633695 I0811 07:38:01.110484 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 07:38:01.110919 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 07:38:01.110912414 +0000 UTC m=+406.955260054 I0811 07:38:01.652078 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 07:38:01.652065054 +0000 UTC m=+407.496412704 I0811 07:38:01.706468 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 07:38:01.754172 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 07:38:01.754155443 +0000 UTC m=+407.598503093 I0811 07:38:01.898993 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 07:38:02.048196 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 07:38:02.048735 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 07:38:02.048727354 +0000 UTC m=+407.893075004 I0811 07:38:02.349005 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 07:38:09.848165 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ckcjm-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0811 07:38:09.848281 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-ckcjm-tls" condition "Issuing" to 2026-08-11 07:38:09.848272695 +0000 UTC m=+415.692620345 I0811 07:38:09.848813 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-ckcjm-tls" condition "Ready" to 2026-08-11 07:38:09.848790118 +0000 UTC m=+415.693137808 I0811 07:38:09.863142 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ckcjm-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ckcjm-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 07:38:09.863225 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-ckcjm-tls" condition "Ready" to 2026-08-11 07:38:09.863217703 +0000 UTC m=+415.707565353 I0811 07:38:10.393220 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ckcjm-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ckcjm-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 07:38:10.440101 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-ckcjm-tls-1" condition "Approved" to 2026-08-11 07:38:10.440091348 +0000 UTC m=+416.284438988 I0811 07:38:10.463507 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-ckcjm-tls-1" condition "Ready" to 2026-08-11 07:38:10.463493734 +0000 UTC m=+416.307841374 I0811 07:38:10.496023 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-ckcjm-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 07:38:10.496014126 +0000 UTC m=+416.340361766 I0811 07:38:10.510622 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ckcjm-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ckcjm-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 07:38:10.569562 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ckcjm-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ckcjm-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 07:38:22.421916 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-08-11 07:38:22.421878567 +0000 UTC m=+428.266226217 I0811 07:38:22.422689 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0811 07:38:22.422730 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-08-11 07:38:22.422721409 +0000 UTC m=+428.267069049 I0811 07:38:22.438443 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 07:38:22.438560 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-08-11 07:38:22.438551968 +0000 UTC m=+428.282899608 I0811 07:38:22.636042 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 07:38:22.670863 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-08-11 07:38:22.670848351 +0000 UTC m=+428.515196001 I0811 07:38:22.690935 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-08-11 07:38:22.690918107 +0000 UTC m=+428.535265747 I0811 07:38:22.715385 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 07:38:22.715370905 +0000 UTC m=+428.559718555 I0811 07:38:22.725081 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 07:38:22.769598 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 07:41:31.778406 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0811 07:41:31.778553 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-11 07:41:31.778541695 +0000 UTC m=+617.622889365 I0811 07:41:31.778813 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-08-11 07:41:31.778779229 +0000 UTC m=+617.623126909 I0811 07:41:31.791242 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0811 07:41:31.791439 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0811 07:41:31.791470 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-11 07:41:31.791465364 +0000 UTC m=+617.635813014 I0811 07:41:31.975268 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0811 07:41:31.983496 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-08-11 07:41:31.983484397 +0000 UTC m=+617.827832047 I0811 07:41:31.999462 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-08-11 07:41:31.999450097 +0000 UTC m=+617.843797747 I0811 07:41:32.029099 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 07:41:32.029081544 +0000 UTC m=+617.873429204 I0811 07:41:32.038373 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0811 07:41:32.038705 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 07:41:32.038697557 +0000 UTC m=+617.883045197 I0811 07:41:32.060559 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0811 07:42:15.149762 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0811 07:42:15.149785 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-08-11 07:42:15.14976199 +0000 UTC m=+660.994109640 I0811 07:42:15.149807 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-08-11 07:42:15.149796831 +0000 UTC m=+660.994144491 I0811 07:42:15.161945 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0811 07:42:15.162153 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-08-11 07:42:15.162141043 +0000 UTC m=+661.006488693 I0811 07:42:15.410947 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0811 07:42:15.443885 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-08-11 07:42:15.443869527 +0000 UTC m=+661.288217207 I0811 07:42:15.469241 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-08-11 07:42:15.469225156 +0000 UTC m=+661.313572806 I0811 07:42:15.498851 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 07:42:15.498834818 +0000 UTC m=+661.343182478 I0811 07:42:15.515673 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0811 07:42:15.516737 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 07:42:15.516722461 +0000 UTC m=+661.361070111 I0811 07:42:15.540457 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"